Certified Advanced Persistent Threat Analyst


Certified Advanced Persistent Threat Analyst, Singapore elarning online course

Course Description

Cyber-attacks have become so sophisticated over the years, that a new term has emerged - Advanced Persistent Threat, which we will refer to as APT. An APT is a group of individuals that have both the means and the intent to launch persistent attacks against specific targets. Understanding these groups and their behavior is important when evaluating threats against any organization.

Hackers have traditionally targeted large corporations, but today small to midsize businesses are being attacked with the same type of highly sophisticated malware. These new strains of advanced malware are often referred to as APTs

Modern malware uses Advanced techniques such as encrypted communication channels, kernel-level rootkits, and sophisticated evasion capabilities to get past a network’s defenses. More importantly, they often leverage zero day vulnerabilities – flaws for which no patch is available yet and no signature has been written.

Modern malware is often Persistent and designed to stick around. It’s stealthy and carefully hides its communications. It lives in a victim’s network for as long as possible, often cleaning up after itself by deleting logs, using strong encryption, and only reporting back to its controller in small, obfuscated bursts of communication.

Many attacks are now blended combinations of different techniques. A common tactic for hackers is to initiate an APT with spear phishing. This involves sending a carefully crafted email that appears to be in the from of a known individual or business with a link to a malicious website or an infected download.

Once the initial breach is successful, attackers can further damage defenses by disabling security protocols, changing security settings or stealing passwords. Groups of highly skilled, motivated, and very well-funded attackers represent significant Threats because they have very specific targets and goals in mind – often financial gain from theft of credit cards and other valuable account information.

Here are the topics that we will be covering in this course. We will begin by going over the APT Lifecycle and teach you a structured approach to analyze and assess inherent vulnerabilities. We will teach you mitigation and countermeasures that may prevent an attacker from gaining a foothold into an organization.

Next, we will get you familiar with APT1 Group and some common ATPs we have seen in the last few years like Stuxnet, and two new ones, Adwind and Poseidon. Lastly, we will get you familiar with the Cyber World War.


Course Objectives

1. Understanding APTs
2. Equation Group
3. Advanced Dissecting Techniques
4. Fighting ATPs


Related Courses

  • Essential Online Course - Computer Hacking Forensic Investigator (CHFI)

    Essential Online Course - Computer Hacking Forensic Investigator (CHFI)

    SGD $299.00

    Course Description

    CHFI certifies individuals in the specific security discipline of computer forensics from a vendor-neutral perspective. The CHFI certification will fortify the application knowledge of law enforcement personnel, system administrators, security officers, defense and military personal, legal professionals, bankers, security professionals, and anyone who is concerned about the integrity of the network infrastructure. Be updated with the latest IT security! - Know the changes and updates in IT Security - Equip yourself with the right knowledge  - Defend your system and data from latest threats - Have the advantage of protecting your data

    Read more...

  • Microsoft Software Development Fundamentals MTA (98-361)

    Microsoft Software Development Fundamentals MTA (98-361)

    SGD $45.00

    Course Description

    Microsoft's Software Development Fundamentals MTA Exam 98-361 is designed for candidates who are seeking to prove core software development skills. Microsoft Technology Associate (MTA) is an introductory Microsoft certification for individuals considering a career in technology. MTA certification addresses a wide spectrum of fundamental technical concepts, assesses and validates your core technical knowledge, and enhances your technical credibility. The Software Development Fundamentals exam tests your broad, foundational knowledge of the various technologies and options when developing software solutions using today's tools. In this course, Mark Long helps you to understand the core technologies and functionalities that can be used to create excellent software solutions. Understanding the core technologies, their functionalities, and how they fit into the big picture of software development is key to getting started in a software development career. Mark brings over 25 years of real world experience along as he helps you learn what you need to know to prepare for the 98-361 MTA exam. Be fully prepared for your certifications exams! - Learn of the examination outline before sitting for your certification  - Know and understand the topics that may be covered in your examinations - Learn and understand the chapters for each tailored certification  - Go through past questions to have a feel of the examinations This course is SkillsFuture Credit Eligible.

    Read more...

  • Certification at Your Fingertips - CompTIA SY0-401: Security+

    Certification at Your Fingertips - CompTIA SY0-401: Security+

    SGD $299.00

    Course Description

    This CompTIA Security+ course covers the most important foundational principles for securing a network, and managing risk. Such topics as Access control, Identity management and cryptography are the few topics covered in this course. Security concerns associated with cloud computing, BYOD and SCADA are addressed in this SY0-401 course. Prepare yourself fully with the right skills and knowledge with this course.  Be fully prepared for your certifications exams! - Learn of the examination outline before sitting for your certification  - Know and understand the topics that may be covered in your examinations - Learn and understand the chapters for each tailored certification  - Go through past questions to have a feel of the examinations  

    Read more...


Content

Understanding APTs

+

Advanced Persistent Threat Defender Course Intro

APT Overview Part 1

APT Overview Part 2

APT Overview Part 3

APT Overview Part 4

APT Overview Part 5

Cyber Kill Chain & APT Lifecycle Part 4

Cyber Kill Chain & APT Lifecycle Part 5

Cyber Kill Chain & APT Lifecycle Part 6

Cyber Kill Chain & APT Lifecycle Part 7

Cyber Kill Chain & APT Lifecycle Part 8

APT1 Overview

Stuxnet Overview Part 1

Stuxnet Overview Part 2

Stuxnet Overview Part 3

Cyberwar: New Domain of Warfare

Mr. Robot Threat Capabilities

Cyber Kill Chain & APT Lifecycle Part 1

Cyber Kill Chain & APT Lifecycle Part 2

Cyber Kill Chain & APT Lifecycle Part 3

Equation Group

+

Equation Group Overview Part 1

Equation Group Overview Part 2

Equation Group Components Part 1

Equation Group Components Part 2

Equation Group Components Part 3

DoubleFantasy

EquationDrug

GrayFish

Fanny Part 1

Fanny Part 2

Infection Mechanism

LAB 2: Equation Group

Advanced Dissecting Techniques

+

Advanced Dissecting Techniques Overview Part 1

Advanced Dissecting Techniques Overview Part 2

Binary Instrumentation Part 1

Binary Instrumentation Part 2

Binary Instrumentation Part 3

Automated String Decoding Part 1

Automated String Decoding Part 2

Automated String Decoding Part 3

Automated String Decoding Part 4

Immunity Debugger PyCommands Part 1

Immunity Debugger PyCommands Part 2

Immunity Debugger PyCommands Part 3

Immunity Debugger PyCommands Part 4

Windows Kernel Drivers Analysis? Part 1

Windows Kernel Drivers Analysis? Part 2

Windows Kernel Drivers Analysis? Part 3

Windows Kernel Drivers Analysis? Part 4

Windows Kernel Drivers Analysis? Part 5

Fighting ATPs

+

The Challenge Part 1

The Challenge Part 2

The Challenge Part 3

Callback detection strategy Part 1

Callback detection strategy Part 2

Application Crashing Monitoring

SGD $299.00
(Price excludes GST)
GET ACCESS NOW
Convince your boss email
This site is best viewed using the latest versions of Google Chrome, Apple Safari, Mozilla FireFox, Microsoft Internet Explorer 11 and Edge which supports HTML5/Webkit technologies.